Embedded Quality Assurance Engineer

eNGINE builds Technical Teams. We are a Solutions and Placement firm shaped by decades of interaction with Technical professionals. Our inspiration is continuous learning and engagement with the markets we serve, the talent we represent, and the teams we build. Our Consulting Workforce is encouraged to enjoy career fulfillment in the form of challenging projects, schedule flexibility, and paid training/certifications. Successful outcomes start and finish with eNGINE.

eNGINE is hiring a Product Security Engineer to support our product development teams. 

What You''ll Do

• Partner with embedded software teams to integrate security controls throughout the product development lifecycle
• Lead threat modeling sessions for new and existing network-connected embedded systems
• Drive SBOM and VEX vulnerability management using enterprise and team-preferred tooling
• Advise teams on secure coding practices, encryption, authentication, and access controls
• Develop cybersecurity documentation supporting regulatory submissions — risk assessments, security testing results, and mitigation strategies
• Support Coordinated Vulnerability Disclosure (CVD) processes
• Guide teams on U.S. and international regulatory requirements including FDA Pre- and Post-Market Cybersecurity Guidance, EUMDR, NMPA, TIR57, IEC 62304, and the NIST Cybersecurity Framework
• Monitor the evolving threat landscape and keep internal teams current on emerging risks and technologies
• Maintain and review secure development policies

What You Bring

• 5+ years of cybersecurity experience focused on medical devices or healthcare technology
• Solid understanding of embedded systems, embedded Linux, and cloud architectures (AWS preferred)
• Working knowledge of networking fundamentals — TCP/IP, secure communications, certificates, and protocols
• Hands-on experience with Python for scripting, automation, or lightweight security tooling
• Familiarity with SAST, DAST, IAST, OSS scanning, fuzzing, and threat modeling tools
• Strong knowledge of FDA Pre- and Post-Market Cybersecurity Guidance and related medical device regulatory frameworks
• Ability to communicate technical security concepts clearly to audiences ranging from developers to FDA auditors
• Bachelor''s degree in Computer Science, Electrical/Computer Engineering, or a related discipline

Nice to Have

• Experience with e-STAR submissions and cybersecurity architecture documentation
• Familiarity with SBOM generation pipelines and executive order compliance
• Background working in ISO 13485 or 21 CFR 820 regulated environments